@mirrowel/opencode-openshare 0.2.0-dev.2 → 0.2.1

package/dist/tui.js

@@ -23,7 +23,6 @@ var DEFAULTS = {
   completedDelayMs: 5000,
   modelLabel: "$Provider/$Model",
   ttlDays: 90,
-  openTasksInNewTab: true,
   authLogin: "",
   authPassword: "",
   spoolDir: "",
@@ -252,7 +251,10 @@ function loadConfig(pluginDir, options) {
           continue;
         cfg[key] = value;
       }
-    } catch {}
+    } catch (e) {
+      if (existsSync(path))
+        console.error(`[openshare] config file ${path} could not be parsed - ignored:`, e?.message ?? e);
+    }
   }
   if (options && typeof options === "object") {
     const serversOpt = normalizeServers(options.servers);
@@ -297,6 +299,14 @@ function loadConfig(pluginDir, options) {
     cfg.shareMode = env.OPENSHARE_SHARE_MODE;
   if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE)
     cfg.urlFile = URL_FILE_NONE;
+  if (cfg.workerUrl)
+    cfg.workerUrl = cfg.workerUrl.trim().replace(/\/+$/, "");
+  if (cfg.servers) {
+    const fixed = {};
+    for (const [u, e] of Object.entries(cfg.servers))
+      fixed[u.trim().replace(/\/+$/, "")] = e;
+    cfg.servers = fixed;
+  }
   return cfg;
 }
 function globalConfigDir(env) {
@@ -434,6 +444,12 @@ function queueBindingWrite(sid, fn) {
   return run;
 }
 
+// src/core.ts
+var liveTargets = [];
+function engineTargetUrls() {
+  return liveTargets;
+}
+
 // src/share-flow.ts
 function currentConfig(baseDir = moduleDir()) {
   return loadConfig(baseDir);
@@ -459,7 +475,6 @@ function saveConfig(cfg, target, baseDir = moduleDir()) {
       "completedDelayMs",
       "modelLabel",
       "ttlDays",
-      "openTasksInNewTab",
       "authLogin",
       "authPassword",
       "spoolDir",
@@ -490,8 +505,8 @@ function serverEntries(cfg = currentConfig()) {
     for (const [url, entry] of Object.entries(cfg.servers))
       merged[url] = { ...merged[url], ...entry };
   const urls = Object.keys(merged);
-  const activeUrl = urls.find((u) => merged[u].active) ?? urls[0];
-  return urls.map((url) => ({ url, entry: merged[url], active: url === activeUrl }));
+  const anyActive = urls.some((u) => merged[u].active);
+  return urls.map((url) => ({ url, entry: merged[url], active: anyActive ? merged[url].active === true : url === urls[0] }));
 }
 function bindingsOf(info) {
   const raw = info?.metadata?.[METADATA_KEY];
@@ -500,6 +515,8 @@ function bindingsOf(info) {
   const record = raw;
   const opts = record.opts ?? undefined;
   const enabled = record.enabled === true ? true : undefined;
+  const lastError = typeof record.lastError === "string" ? record.lastError : undefined;
+  const ttlClamped = record.ttlClamped && typeof record.ttlClamped === "object" ? record.ttlClamped : undefined;
   const out = [];
   if (record.servers && typeof record.servers === "object") {
     for (const [server, entry] of Object.entries(record.servers)) {
@@ -517,7 +534,10 @@ function bindingsOf(info) {
         enabled,
         opts,
         server,
-        collided
+        collided,
+        optedOut: e.optedOut === true ? true : undefined,
+        lastError,
+        ttlClamped
       });
     }
     return out;
@@ -532,7 +552,9 @@ function bindingsOf(info) {
       enabled,
       opts,
       server: "",
-      collided
+      collided,
+      lastError,
+      ttlClamped
     });
   }
   return out;
@@ -626,6 +648,20 @@ async function setShareFlag(client, sid, opts) {
   metadata[METADATA_KEY] = value;
   return patchMetadata(client, sid, metadata);
 }
+async function setShareOpts(client, sid, opts) {
+  const info = await getSession(client, sid);
+  if (!info)
+    return false;
+  const metadata = { ...info.metadata ?? {} };
+  const existing = info.metadata?.[METADATA_KEY];
+  const value = existing && typeof existing === "object" ? { ...existing } : { v: 2, servers: {} };
+  if (Object.keys(opts).length)
+    value.opts = opts;
+  else
+    delete value.opts;
+  metadata[METADATA_KEY] = value;
+  return patchMetadata(client, sid, metadata);
+}
 async function clearShareFlag(client, sid) {
   const info = await getSession(client, sid);
   if (!info)
@@ -786,6 +822,28 @@ function adminClient(workerUrl, token) {
     health: () => call("GET", "/health")
   };
 }
+function meClient(workerUrl, token) {
+  const base = normServerUrl(workerUrl);
+  const call = async (method, path) => {
+    try {
+      const res = await fetch(`${base}${path}`, {
+        method,
+        headers: { authorization: `Bearer ${token}` },
+        signal: AbortSignal.timeout(12000)
+      });
+      const parsed = await res.json().catch(() => ({}));
+      if (!res.ok)
+        return { ok: false, status: res.status, error: parsed?.error ?? `HTTP ${res.status}` };
+      return { ok: parsed?.ok !== false, status: res.status, data: parsed, error: parsed?.error };
+    } catch (error) {
+      return { ok: false, status: 0, error: error.message };
+    }
+  };
+  return {
+    me: () => call("GET", "/api/me"),
+    myShares: () => call("GET", "/api/me/shares")
+  };
+}
 function adminTokenFor(url, cfg = currentConfig()) {
   const base = normServerUrl(url);
   const entry = serverEntries(cfg).find((s) => s.url === base);
@@ -802,11 +860,22 @@ async function waitForBinding(client, sid, timeoutMs = 25000) {
   }
   return;
 }
-async function requestShareConsent(host) {
+async function requestShareConsent(host, context) {
+  const lines = ["Publish this session (and its subagent sessions) to your openshare worker?"];
+  if (context) {
+    const bits = [];
+    if (context.server)
+      bits.push(`server: ${context.server}`);
+    if (context.ttlDays !== undefined)
+      bits.push(`TTL: ${context.ttlDays}d`);
+    bits.push(`read auth: ${context.auth ? "on" : "off"}`);
+    lines.push(bits.join(" - "));
+  }
+  lines.push("Anyone with the link can read the conversation (login-gated only when read auth is on).");
   return host.ui.showConfirm({
     title: "Share Session",
-    message: `Publish this session (and its subagent sessions) to your openshare worker?
-The link lets anyone with it read the conversation.`,
+    message: lines.join(`
+`),
     confirmLabel: "Share"
   });
 }
@@ -814,16 +883,23 @@ async function shareWithConsent(host, sessionID) {
   if (!sessionID)
     return { ok: false, message: "No active session to share." };
   const cfg = currentConfig();
-  if (!isConfigured(cfg)) {
-    return { ok: false, message: "No share server connected \u2014 run /openshare to connect one.", unconfigured: true };
+  if (!isConfigured(cfg) && !engineTargetUrls().length) {
+    return { ok: false, message: "No share server connected - run /openshare to connect one.", unconfigured: true };
   }
   const root = await resolveRoot(host.client, sessionID);
-  const existing = await readBinding(host.client, root);
-  if (existing?.url && existing.enabled !== false) {
-    await host.clipboard.write(existing.url);
-    return { ok: true, message: `Share URL copied to clipboard: ${existing.url}`, url: existing.url };
+  const all = await readBindings(host.client, root);
+  const live = all.find((b) => b.url && b.enabled !== false && !b.optedOut);
+  if (live) {
+    await host.clipboard.write(live.url);
+    return { ok: true, message: `Share URL copied to clipboard: ${live.url}`, url: live.url };
   }
-  if (!await requestShareConsent(host))
+  const opts = all[0]?.opts;
+  const server = serverEntries(cfg).find((s) => s.active) ?? serverEntries(cfg)[0] ?? (engineTargetUrls()[0] ? { url: engineTargetUrls()[0] } : undefined);
+  if (!await requestShareConsent(host, {
+    server: server ? hostOf(server.url) : undefined,
+    ttlDays: opts?.ttlDays ?? cfg.ttlDays,
+    auth: !!(opts?.authLogin ?? cfg.authLogin) && !!(opts?.authPassword ?? cfg.authPassword)
+  }))
     return { ok: false, message: "Share cancelled." };
   return confirmShare(host, root);
 }
@@ -833,12 +909,23 @@ async function confirmShare(host, rootSessionID) {
   dbgLog(`confirmShare: setShareFlag -> ${set}`);
   if (!set)
     return { ok: false, message: "Could not write the share flag into session metadata." };
+  await patchSessionBinding(host.client, rootSessionID, (servers) => {
+    for (const e of Object.values(servers)) {
+      if (e && typeof e === "object")
+        delete e.optedOut;
+    }
+  });
   const binding = await waitForBinding(host.client, rootSessionID);
   dbgLog(`confirmShare: waitForBinding -> ${binding?.url ? binding.url : "timeout"}`);
   if (!binding?.url) {
+    await clearShareFlag(host.client, rootSessionID);
+    const fresh = await readBinding(host.client, rootSessionID);
+    const why = fresh?.lastError ? `
+Reason: ${fresh.lastError}` : "";
     return {
       ok: false,
-      message: "Share did not come up (timeout waiting for the URL). Is the worker reachable? Check the server plugin log for [openshare] lines."
+      message: `Share did not come up (timed out waiting for the URL); the share flag was disarmed.${why}
+Check the [openshare] stderr lines for details.`
     };
   }
   await host.clipboard.write(binding.url);
@@ -944,13 +1031,15 @@ Regular users should NOT hold the root token: connect via an access code instead
   },
   shareMode: {
     label: "Share mode",
-    help: '"all" shares every session; "manual" needs /share. Default: TUI presence.',
+    help: '"all" shares every session; "manual" needs /share. Default: TUI presence. Takes effect after opencode restarts.',
     kind: "text",
     options: ["auto", "all", "manual"],
     section: "Sharing",
-    info: `all: every NEW session shares automatically (CI posture). Sessions that existed before the plugin started are never auto-shared \u2014 share those explicitly. manual: sessions stay private until you run /share.
+    info: `all: every NEW session shares automatically (CI posture). Sessions that existed before the plugin started are never auto-shared - share those explicitly. manual: sessions stay private until you run /share.
 
-Default (empty): TUI presence decides \u2014 installing the TUI part means manual, server-only means all.`,
+Default (empty): TUI presence decides - installing the TUI part means manual, server-only means all.
+
+NOTE: the mode is resolved once at plugin load. Changing it here saves immediately but only takes effect after opencode restarts - until then new sessions keep following the OLD mode.`,
     def: "auto (TUI presence)"
   },
   debounceMs: {
@@ -991,15 +1080,6 @@ A graceful opencode exit flushes the pending flip, so CI runs land their final s
 A per-session override lives in the This-session section; it is sent at create/attach time.`,
     def: "worker cap (90 on the reference deployment)"
   },
-  openTasksInNewTab: {
-    label: "Open tasks in new tab",
-    help: "Viewer: task rows open subagent pages in a new tab.",
-    kind: "text",
-    options: ["true", "false"],
-    section: "Sharing",
-    info: "Viewer behavior only: clicking a task (subagent) row opens its sub-page in a new browser tab instead of navigating. true/false.",
-    def: "true"
-  },
   authLogin: {
     label: "Read auth: login",
     help: "Optional read gate for share pages. Empty removes protection on the next attach.",
@@ -1063,10 +1143,8 @@ function helpForKey(key, cfg, sources) {
 function displayValue(key, cfg) {
   if (key === "createToken" || key === "authPassword")
     return mask(String(cfg[key] ?? ""));
-  if (key === "openTasksInNewTab")
-    return String(cfg.openTasksInNewTab !== false);
   if (key === "announceStderr")
-    return String(cfg.announceStderr !== false);
+    return cfg.announceStderr !== false ? "on" : "off";
   const value = cfg[key];
   return value === undefined || value === "" ? "(not set)" : String(value);
 }
@@ -1090,7 +1168,7 @@ async function editKey(host, cfg, key) {
     const next = { ...cfg };
     if (key === "shareMode")
       next[key] = picked === "auto" ? undefined : picked;
-    else if (key === "openTasksInNewTab" || key === "announceStderr")
+    else if (key === "announceStderr")
       next[key] = picked === "true";
     else
       next[key] = picked;
@@ -1173,6 +1251,8 @@ This creates your own user on ${url} (label prompt, prefilled), mints its token,
       options.push({ title: "Enroll now", value: "enroll", description: holdsRoot ? "join as a user via code/public enrollment" : "get a user token immediately" });
     if (mine.entry.token && !holdsRoot)
       options.push({ title: "Rotate token", value: "rotate", description: "new token, old one revoked" });
+    if (mine.entry.token && !holdsRoot)
+      options.push({ title: "Your account", value: "account", description: "limits, token expiry, your shares" });
     if (mine.entry.token && !holdsRoot)
       options.push({ title: "Disconnect", value: "disconnect", description: "revoke the token server-side and forget it", danger: true });
     options.push({
@@ -1190,12 +1270,13 @@ Needs the server's root CREATE_TOKEN (saved admin token used first; prompted oth
     if (choice === undefined || choice === "__back")
       return;
     if (choice === "active") {
-      for (const other of entries) {
-        if (other.url !== url)
-          saveServerEntry(other.url, { active: undefined });
-      }
       saveServerEntry(url, { active: true });
-      host.ui.toast({ variant: "success", title: "OpenShare", message: `${url} is now the active server.` });
+      const stillActive = serverEntries().filter((s) => s.active);
+      host.ui.toast({
+        variant: "success",
+        title: "OpenShare",
+        message: stillActive.length > 1 ? `${url} is primary - ${stillActive.length} servers stay ACTIVE (fan-out): new sessions mirror to all of them.` : `${url} is now the active server.`
+      });
       return;
     }
     if (choice === "adopt") {
@@ -1247,6 +1328,34 @@ Needs the server's root CREATE_TOKEN (saved admin token used first; prompted oth
       }
       continue;
     }
+    if (choice === "account") {
+      const me = meClient(url, mine.entry.token ?? "");
+      const [meRes, sharesRes] = await Promise.all([me.me(), me.myShares()]);
+      if (!meRes.ok) {
+        await showInfo(host.ui, { title: "Account", message: `Could not read your account: ${meRes.error ?? "error"}.
+If the token was revoked server-side, use Enroll now instead.` });
+        continue;
+      }
+      const d = meRes.data;
+      const lim = d.token?.limits ?? {};
+      const fmt = (v) => v ? String(v) : "unlimited";
+      const lines = [
+        `User: ${d.label} (${d.userId})`,
+        `Token: ${d.token?.label ?? "?"} - expires ${d.token?.expiresAt ? new Date(d.token.expiresAt).toISOString().slice(0, 10) : "never"}`,
+        `Limits: live shares ${fmt(lim.maxLiveShares)} - max TTL ${fmt(lim.maxTtlDays)}d - daily creates ${fmt(lim.dailyCreates)}`
+      ];
+      if (sharesRes.ok) {
+        const shares = sharesRes.data?.shares ?? [];
+        lines.push(`Shares: ${shares.length} (${shares.filter((s) => s.status === "live").length} live)`);
+        for (const s of shares.slice(0, 10))
+          lines.push(`  ${s.id} - ${s.status} - ${new Date(s.createdAt).toISOString().slice(0, 10)}`);
+        if (shares.length > 10)
+          lines.push(`  ...and ${shares.length - 10} more`);
+      }
+      await showInfo(host.ui, { title: "Your account", message: lines.join(`
+`) });
+      continue;
+    }
     if (choice === "rotate") {
       const res = await rotateAtServer(url, mine.entry.token ?? "");
       if (res.ok && res.token) {
@@ -1258,8 +1367,13 @@ Needs the server's root CREATE_TOKEN (saved admin token used first; prompted oth
       continue;
     }
     if (choice === "disconnect") {
-      const sure = await showConfirm(host.ui, { title: "Disconnect", message: `Revoke the token at ${url} and forget it?
-Your shares stay (read-only for you until TTL).`, confirmLabel: "Disconnect", danger: true });
+      const sure = await showConfirm(host.ui, {
+        title: "Disconnect",
+        message: `Revoke the token at ${url} and forget it?
+Revoking your last token freezes control of ALL your shares there (even with the share secrets) - pages stay readable until their TTL; only the server admin can restore control.`,
+        confirmLabel: "Disconnect",
+        danger: true
+      });
       if (!sure)
         continue;
       const res = await disconnectAtServer(url, mine.entry.token ?? "");
@@ -1672,7 +1786,7 @@ async function adminSharesMenu(host, client, url, shares, users) {
     }
   }
 }
-async function settingsDialog(host, startAtSession) {
+async function settingsDialog(host, startAtSession, startGroup) {
   let cfg = currentConfig();
   let dirty = false;
   const candidates = writeCandidates(moduleDir());
@@ -1854,11 +1968,24 @@ ${otherServers.map((s) => `\u2022 ${s.url}`).join(`
       }
     }
     const binding = bindings[0];
+    if (binding?.lastError || binding?.ttlClamped) {
+      const bits = [];
+      if (binding?.ttlClamped)
+        bits.push(`TTL clamped ${binding.ttlClamped.requested}d -> ${binding.ttlClamped.effective}d by server/token policy`);
+      if (binding?.lastError)
+        bits.push(`last share error: ${binding.lastError}`);
+      rows.push({ title: "Share status notes", value: "__notes", description: bits[0].slice(0, 60), disabled: true, help: `Engine-recorded notes for this session's share(s):
+
+${bits.join(`
+`)}
+
+The clamp note appears when the server or your token's policy reduced a requested TTL. The error note is the engine's last create/attach refusal (quota, freeze, rate limit) - it clears on the next successful sync.` });
+    }
     rows.push({
       title: "Session TTL override (days)",
       value: "session:ttl",
       description: binding?.opts?.ttlDays !== undefined ? String(binding.opts.ttlDays) : "(worker default)",
-      help: `Per-session share lifetime. Overrides the config ttlDays for THIS session's pages; still capped by the server's MAX_TTL_DAYS and the token's maxTtlDays. Applied at the next create/attach.
+      help: `Per-session share lifetime. Overrides the config ttlDays for THIS session's pages; still capped by the server's MAX_TTL_DAYS and the token's maxTtlDays. On a live share it applies immediately (shortening may end an older page at once); otherwise it is used when you share.
 
 Current: ${binding?.opts?.ttlDays !== undefined ? `${binding.opts.ttlDays} days` : "(none \u2014 config default)"}`
     });
@@ -1866,7 +1993,7 @@ Current: ${binding?.opts?.ttlDays !== undefined ? `${binding.opts.ttlDays} days`
       title: "Session read auth",
       value: "session:auth",
       description: binding?.opts?.authLogin ? `${binding.opts.authLogin} / ****` : "(config default)",
-      help: `Login gate for THIS session's page only \u2014 viewers must log in (7-day cookie, lockout). Overrides the config read auth. Applied at the next create/attach; removing the login removes the gate.
+      help: `Login gate for THIS session's page only \u2014 viewers must log in (7-day cookie, lockout). Overrides the config read auth; a login and password are both required (or neither). On a live share it applies immediately; otherwise when you share. Removing the login removes the gate.
 
 Current: ${binding?.opts?.authLogin ? `${binding.opts.authLogin} / (password set)` : "(none \u2014 config default applies)"}`
     });
@@ -2049,11 +2176,9 @@ Note: no token held \u2014 the plugin enrolls on first contact (public) or needs
         });
         if (!pick || pick === "__cancel")
           return;
-        for (const s of serverEntries())
-          if (s.url !== pick)
-            saveServerEntry(s.url, { active: undefined });
         saveServerEntry(pick, { active: true });
-        host.ui.toast({ variant: "success", title: "OpenShare", message: `${hostOf(pick)} activated \u2014 this session mirrors there within seconds.` });
+        const nActive = serverEntries().filter((s) => s.active).length;
+        host.ui.toast({ variant: "success", title: "OpenShare", message: `${hostOf(pick)} activated (${nActive} active) - this session mirrors there within seconds.` });
         return;
       }
       if (choice === "session:unshare") {
@@ -2068,18 +2193,26 @@ Note: no token held \u2014 the plugin enrolls on first contact (public) or needs
         if (how === undefined || how === "__cancel")
           return;
         if (how === "leave") {
-          const all = await readBindings(host.client, root);
+          const allB = await readBindings(host.client, root);
           const okPatch = await patchSessionBinding(host.client, root, (servers) => {
-            for (const b of all) {
+            for (const b of allB) {
               if (!b.server)
                 continue;
-              delete servers[b.server];
-              servers[b.server] = { optedOut: true };
+              servers[b.server] = { ...servers[b.server], id: b.id, secret: b.secret, rev: b.rev, url: b.url, optedOut: true };
             }
           });
-          host.ui.toast({ variant: okPatch ? "success" : "error", title: "OpenShare", message: okPatch ? "Left as-is \u2014 snapshots until their TTLs." : "Could not update the binding." });
+          host.ui.toast({ variant: okPatch ? "success" : "error", title: "OpenShare", message: okPatch ? "Left as-is \u2014 snapshots until their TTLs (delete stays available here)." : "Could not update the binding." });
           return;
         }
+        const sureAll = await showConfirm(host.ui, {
+          title: "Delete every page?",
+          message: `Permanently delete ${live.length} share page(s) and stop sharing?
+Every link stops working for everyone. This cannot be undone.`,
+          confirmLabel: "Delete every page",
+          danger: true
+        });
+        if (!sureAll)
+          return;
         const result = await runUnshareFlow(host, startAtSession);
         host.ui.toast({ variant: result.ok ? "success" : "error", title: "OpenShare", message: result.message });
         return;
@@ -2099,30 +2232,37 @@ Note: no token held \u2014 the plugin enrolls on first contact (public) or needs
           }
           opts.ttlDays = Math.floor(days);
         }
-        await setShareFlag(host.client, root, opts);
-        host.ui.toast({ variant: "success", title: "OpenShare", message: opts.ttlDays !== undefined ? `Session TTL: ${opts.ttlDays}d (applies at the next attach/create)` : "Session TTL override cleared" });
+        await setShareOpts(host.client, root, opts);
+        const liveNow = live.length > 0;
+        host.ui.toast({
+          variant: "success",
+          title: "OpenShare",
+          message: liveNow ? `Session TTL: ${opts.ttlDays !== undefined ? `${opts.ttlDays}d - applied now (shortening may end an older page immediately)` : "(default) - applied now"}.` : `Session TTL: ${opts.ttlDays !== undefined ? `${opts.ttlDays}d` : "(default)"} - saved, applies when you share.`
+        });
         return;
       }
       if (choice === "session:auth") {
-        const login = await showPrompt(host.ui, { title: "Session read auth: login", placeholder: "empty = use config default", value: current?.opts?.authLogin ?? "" });
+        const login = await showPrompt(host.ui, { title: "Session read auth: login", placeholder: "empty = no read auth", value: current?.opts?.authLogin ?? "" });
         if (login === undefined)
           return;
-        const password = await showPrompt(host.ui, { title: "Session read auth: password", placeholder: "empty = no password" });
+        const password = await showPrompt(host.ui, { title: "Session read auth: password", placeholder: login === "" ? "(unused)" : "password (required with a login)" });
         if (password === undefined)
           return;
+        if (login === "" !== (password === "")) {
+          host.ui.toast({ variant: "error", title: "OpenShare", message: "Read auth needs both a login and a password - or neither (no gate)." });
+          return;
+        }
         const opts = { ...current?.opts ?? {} };
         if (login === "") {
           delete opts.authLogin;
           delete opts.authPassword;
         } else {
           opts.authLogin = login;
-          if (password !== "")
-            opts.authPassword = password;
-          else
-            delete opts.authPassword;
+          opts.authPassword = password;
         }
-        await setShareFlag(host.client, root, opts);
-        host.ui.toast({ variant: "success", title: "OpenShare", message: "Session read auth saved (applies at the next attach/create)." });
+        await setShareOpts(host.client, root, opts);
+        const liveNow2 = live.length > 0;
+        host.ui.toast({ variant: "success", title: "OpenShare", message: liveNow2 ? `Read auth ${login === "" ? "removed" : "saved"} - applied now.` : `Read auth ${login === "" ? "cleared" : "saved"} - applies when you share.` });
         return;
       }
     }
@@ -2139,6 +2279,8 @@ Note: no token held \u2014 the plugin enrolls on first contact (public) or needs
       await dispatch(choice);
     }
   };
+  if (startAtSession && startGroup === "session")
+    await groupMenu("session");
   const seconds = (ms, fallback) => `${Math.round((ms ?? fallback) / 100) / 10}s`;
   while (true) {
     const servers = serverEntries(cfg);
@@ -2363,7 +2505,7 @@ function buildShareCommand(host, sessionID) {
       dbgLog(`/share run: entered (sid=${sessionID() ?? "none"})`);
       host.ui.dialog.clear();
       const cfg = currentConfig();
-      if (!isConfigured(cfg)) {
+      if (!isConfigured(cfg) && !engineTargetUrls().length) {
         onboardingDialog(host);
         return;
       }
@@ -2378,7 +2520,7 @@ function buildShareCommand(host, sessionID) {
         return;
       const { all, goneShown } = swept;
       if (all.some((b) => b.url && b.enabled !== false)) {
-        await settingsDialog(host, sid);
+        await settingsDialog(host, sid, "session");
         return;
       }
       if (goneShown && all.length === 0)

package/openshare.config.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "Open(code)Share plugin config. Priority: OPENSHARE_* env vars > plugin options > this file > code defaults. Sync cadence keys are clamped into the worker's policy window (see worker SOCKET_POLICY/DEBOUNCE_MIN_MS/DEBOUNCE_MAX_MS/COMPLETED_DELAY_MAX_MS). Keys: workerUrl (your openshare-worker deployment; empty = plugin stays disabled), createToken (legacy: the worker's CREATE_TOKEN — keep OUT of git), servers (multi-server memberships: url -> {token, code, label, active, adminToken (root token for the TUI admin console)}; the active entry (or the first) receives new sessions; with no token the plugin ENROLLS itself — public servers take anyone, private ones need a code from the hoster; enrolled tokens persist to ~/.config/opencode/openshare.config.json), debounceMs (sync interval: max time between syncs while streaming; default 10000), completedDelayMs (idle this long before the share says completed; default 5000, 0 = immediate), modelLabel ($Provider/$Model placeholders; literal text sends as-is; empty string hides the model), ttlDays (per-share TTL, capped by the worker), openTasksInNewTab (task rows open subagent pages in a new tab), authLogin/authPassword (optional read gate on the share pages; sent on create AND resume; empty on resume removes protection), spoolDir (temporary unacked-frame buffer; default XDG data home), urlFile (write each share URL to this file; empty = default openshare.urls.txt in the session's directory; \"none\" = no URL file), announceStderr (false silences the [openshare] live: / url file: log lines; the share itself is unaffected).",
+  "$comment": "Open(code)Share plugin config. Priority: OPENSHARE_* env vars > plugin options > this file > code defaults. Sync cadence keys are clamped into the worker's policy window (see worker SOCKET_POLICY/DEBOUNCE_MIN_MS/DEBOUNCE_MAX_MS/COMPLETED_DELAY_MAX_MS). Keys: workerUrl (your openshare-worker deployment; empty = plugin stays disabled), createToken (legacy: the worker's CREATE_TOKEN — keep OUT of git), servers (multi-server memberships: url -> {token, code, label, active, adminToken (root token for the TUI admin console)}; the active entry (or the first) receives new sessions; with no token the plugin ENROLLS itself — public servers take anyone, private ones need a code from the hoster; enrolled tokens persist to ~/.config/opencode/openshare.config.json), debounceMs (sync interval: max time between syncs while streaming; default 10000), completedDelayMs (idle this long before the share says completed; default 5000, 0 = immediate), modelLabel ($Provider/$Model placeholders; literal text sends as-is; empty string hides the model), ttlDays (per-share TTL, capped by the worker), authLogin/authPassword (optional read gate on the share pages; sent on create AND resume; empty on resume removes protection), spoolDir (temporary unacked-frame buffer; default XDG data home), urlFile (write each share URL to this file; empty = default openshare.urls.txt in the session's directory; \"none\" = no URL file), announceStderr (false silences the [openshare] live: / url file: log lines; the share itself is unaffected).",
   "workerUrl": "",
   "createToken": "",
   "servers": {},
@@ -7,7 +7,6 @@
   "completedDelayMs": 5000,
   "modelLabel": "$Provider/$Model",
   "ttlDays": 90,
-  "openTasksInNewTab": true,
   "authLogin": "",
   "authPassword": "",
   "spoolDir": "",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mirrowel/opencode-openshare",
-  "version": "0.2.0-dev.2",
+  "version": "0.2.1",
   "type": "module",
   "description": "Open(code)Share — re:share: self-hosted session sharing for opencode. Server plugin (single file or package), optional TUI for interactive opt-in sharing.",
   "license": "MIT",

package/src/banner.txt

@@ -19,7 +19,7 @@
 // > code defaults. Keys: servers (multi-server: url -> {token, code,
 // label, active, adminToken}), workerUrl, createToken (legacy pair),
 // shareMode ("all" | "manual"; default = TUI presence), debounceMs,
-// completedDelayMs, modelLabel, ttlDays, openTasksInNewTab,
+// completedDelayMs, modelLabel, ttlDays,
 // authLogin, authPassword, spoolDir, urlFile ("none" = off),
 // announceStderr.
 //

package/src/commands.ts

@@ -27,6 +27,7 @@ import {
   verifyShare,
 } from "./share-flow.js"
 import { onboardingDialog, settingsDialog } from "./settings.js"
+import { engineTargetUrls } from "./core.js"
 import { dbgLog } from "./sidebar.js"
 import type { ShareHostApi, ShareHostLayerCommand } from "./tui-host.js"
 
@@ -152,7 +153,9 @@ export function buildShareCommand(host: ShareHostApi, sessionID: () => string |
       dbgLog(`/share run: entered (sid=${sessionID() ?? "none"})`)
       host.ui.dialog.clear()
       const cfg = currentConfig()
-      if (!isConfigured(cfg)) {
+      // engine-aware gate: project-level plugin options can configure
+      // targets the TUI's file chain cannot see - trust the live engine
+      if (!isConfigured(cfg) && !engineTargetUrls().length) {
         void onboardingDialog(host)
         return
       }
@@ -171,12 +174,12 @@ export function buildShareCommand(host: ShareHostApi, sessionID: () => string |
       // enabled:true; legacy all-mode bindings without the field are live
       // too — only an explicit false is dormant)
       if (all.some((b) => b.url && b.enabled !== false)) {
-        // THE session menu — identical to /openshare → This session by
-        // construction (one surface, no duplicated manager). No
-        // dialog.clear() after: settings owns its chain end-to-end (the
-        // old fire-and-forget menu + immediate clear wiped it instantly —
-        // live-caught as "/share did nothing" on a shared session).
-        await settingsDialog(host, sid)
+        // THE session menu - identical to /openshare  This session by
+        // construction (one surface, no duplicated manager), opened
+        // DIRECTLY (owner: "/share is supposed to be the same menu, not
+        // the settings root one hop away"). No dialog.clear() after:
+        // settings owns its chain end-to-end.
+        await settingsDialog(host, sid, "session")
         return
       }
       // everything was just cleared by the gone modal and the user chose

package/src/config.ts

@@ -49,7 +49,6 @@ export type ShareConfig = {
   completedDelayMs: number
   modelLabel: string
   ttlDays: number
-  openTasksInNewTab: boolean
   authLogin: string
   authPassword: string
   spoolDir: string
@@ -78,7 +77,6 @@ export const DEFAULTS: ShareConfig = {
   completedDelayMs: 5000,
   modelLabel: "$Provider/$Model",
   ttlDays: 90,
-  openTasksInNewTab: true,
   authLogin: "",
   authPassword: "",
   spoolDir: "",
@@ -348,7 +346,13 @@ export function loadConfig(pluginDir: string, options?: Record<string, unknown>)
         if (typeof value === "string" && value === "" && emptyMeansUnset.has(key)) continue
         ;(cfg as Record<string, unknown>)[key] = value
       }
-    } catch {}
+    } catch (e) {
+      // a malformed config file is a real setup error the user must hear
+      // about - silence here looks like "no share server configured".
+      // (Absent files are normal chain candidates - only broken content
+      // is worth a line.)
+      if (existsSync(path)) console.error(`[openshare] config file ${path} could not be parsed - ignored:`, (e as Error)?.message ?? e)
+    }
   }
 
   if (options && typeof options === "object") {
@@ -382,6 +386,16 @@ export function loadConfig(pluginDir: string, options?: Record<string, unknown>)
   // normalize the disable sentinel (case-insensitive from any source)
   if (cfg.urlFile.trim().toLowerCase() === URL_FILE_NONE) cfg.urlFile = URL_FILE_NONE
 
+  // URL hygiene: a trailing slash on a server url becomes
+  // wss://host//api/ws and https://host//s/<id> downstream - strip once,
+  // at the source, so every consumer agrees
+  if (cfg.workerUrl) cfg.workerUrl = cfg.workerUrl.trim().replace(/\/+$/, "")
+  if (cfg.servers) {
+    const fixed: Record<string, ServerEntry> = {}
+    for (const [u, e] of Object.entries(cfg.servers)) fixed[u.trim().replace(/\/+$/, "")] = e
+    cfg.servers = fixed
+  }
+
   return cfg
 }